151 matches found
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pepgetsb pepgetsb does not account for the possibility that pskbmaypull may have moved the skb data, and continues to access the old pointer, resulting in a Use-After-Free UAF condition...
TBP-NETWORK
TBP-NETWORK Network-level implementation of the Teleological Bounding Protocol TBP — attested governance of AI agent actions over a network, from a single machine to enterprise deployments up to WWW scale. « Existing access control decides whether you get in; TBP decides what you're allowed to do...
pyre-check
!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded skreceiveskb The networking receive path is usually executed from a softirq context; however, protocols that acquire a socket lock may have packets queued in the backlog and processed later...
Astra Linux – vulnerability in linux, linux-5.10
The refcount leak exists in pepsockaccept within net/phonet/pep.c in the Linux kernel up to version 5.15.8...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fixed the use of racyskbqueueempty The receive queues are protected by their respective spin-locks, not the socket lock. This could lead to skbpeek returning NULL or a pointer to a socket buffer that has already been...
CVE-2026-55675
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...
CVE-2026-55675
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...
CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...
CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...
CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...
CVE-2026-90327
A flaw was found in the Linux kernel's phonet: pep component. A local attacker could exploit an out-of-bounds write vulnerability in the pepgetsockopt function. This occurs when a getsockopt call provides an optlen smaller than sizeofint, causing the function to write a full integer beyond the...
CVE-2026-55675: Improper Control of Generation of Code
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the prinfo artifact, and the secret-bearing workflowrun job in...
CVE-2026-90327 phonet: pep: do not write beyond optlen in getsockopt
In the Linux kernel, the following vulnerability has been resolved: phonet: pep: do not write beyond optlen in getsockopt pepgetsockopt clamps the reported length to the caller's buffer with mint, but then stores the value with putuserval, int user optval, which always writes sizeofint bytes. A...
PT-2026-94675
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pep getsockopt function where the system fails to properly bound the amount of data written to the user buffer. While the function uses min t to clamp the reported...
Malicious code in egov-pep-frontend (npm)
The package egov-pep-frontend was found to contain malicious code. --- Credit: OpenSSF source...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053228)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053228 advisory. In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skbqueueempty use The receive queues are protected by their respective...
phonet: pep: fix use-after-free in pep_get_sb()
...
CVE-2026-68144
In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pepgetsb pepgetsb doesn't consider that pskbmaypull might have relocated the skb data, and continue to access the older pointer, causing UAF. Reproduced under KASAN: BUG: KASAN:...
EUVD-2026-55527
In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pepgetsb pepgetsb doesn't consider that pskbmaypull might have relocated the skb data, and continue to access the older pointer, causing UAF. Reproduced under KASAN: BUG: KASAN:...